Inactive Change Auditor Agents

Hi, 

I've installed Change Auditor Coordinator and Client in a Windows Server 2016 activating three licenses (Active Directory, SQL and Fileservers). After that I deployed some agents in different servers, for example the agent deployed in the same server than Change Auditor it seems work fine and collect all the events but the rest of the agents it shows with next status 'inactive'. 

The installation of the inactive agents finish correctly and appears the message 'Success' but when the installation process finish the agent status comes to 'Inactive'. We did different test to find the problem without any result: 

-nslookup between agents and coordinator ok.

-ping ok 

-netstat -pa --> appears active conections between agents and coordinator.

-the firewall policies are permissive. 

-Windows firewall disabled. 

-Event viewer from windows shows a kerberos autenthication error but I dont know if this is the problem. 

I change the 'Log on' from the 'Change Auditor Coordinator Service to a service account from Active Directory because I installed the Coordinator using a normal account with domain admin rights. I tried too to change the 'Log on' service to the admin rights account but the problem persist. I'm attaching some pics with more information.

Thanks.

  • What do the agent-side logs say about access to the Coordinator and/or SQL?

  • Hi JohnnyQuest, 

    excuse me, where can I find that log?  

    Thanks. 

  • I tried to uninstall agent-side and reinstall it manually. During the installation process I choosed the Change Auditor installation and the installation proccess finished succesfully. But when I check the agent-side logs I found next error message: 

    2019-10-16 11:50:31.666 [2724][WARN][TorzagLib::Agent::CCoordinatorBinding::Bind(85)] Cannot connect to SCP CN=ChangeAuditor.Coordinator,CN=HQ-SEC-PRO02,OU=Servers,OU=PCs,DC=idiadagroup,DC=com, coordinator is not a compliant version.2019-10-16 11:50:31.666 [2724][WARN][TorzagLib::Agent::CCoordinatorBinding::Bind(85)] Cannot connect to SCP CN=ChangeAuditor.Coordinator,CN=HQ-SEC-PRO02,OU=Servers,OU=PCs,DC=idiadagroup,DC=com, coordinator is not a compliant version.

    The agent service is running but when I try to reconnect to the coordinator appears every time the showed message.   

    Agent version: 7.0.9755.2 (Build 9755) 

    Coordinator version: 7.0.2  (Build 9755)  

     

    Like can you see there's the same version, this error affects to different servers with the agent deployed.